CVE-2008-0984
Miro Player < 1.1 - Remote Code Execution via Malformed MP4 File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0984.
AI-analyzed exploit summary This exploit generates a malicious .ssa subtitle file that triggers a local buffer overflow in Kantaris 0.3.4 Media Player. The payload includes a JMP ESP instruction and a bind shell shellcode, which binds to port 4444 upon successful exploitation.
Description
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Exploits (1)
This exploit generates a malicious .ssa subtitle file that triggers a local buffer overflow in Kantaris 0.3.4 Media Player. The payload includes a JMP ESP instruction and a bind shell shellcode, which binds to port 4444 upon successful exploitation.